This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/8OQtvYsaqccNRtYWBkLjNKT4cfc.roa File: 8OQtvYsaqccNRtYWBkLjNKT4cfc.roa (raw, json) Hash identifier: 2/BrBi2Zd65avcg40G5aR0uE6w2TCZP4COhraO+cpQM= Subject key identifier: F0:E4:2D:BD:8B:1A:A9:C7:0D:46:D6:16:06:42:E3:34:A4:F8:71:F7 Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019BEF983DF7288396F20805FF3B06A708D0 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/8OQtvYsaqccNRtYWBkLjNKT4cfc.roa Signing time: Sat 24 Jan 2026 10:41:30 +0000 ROA not before: Sat 24 Jan 2026 10:41:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207569 IP address blocks: 46.243.1.0/24 maxlen: 24 46.243.4.0/24 maxlen: 24 46.243.6.0/24 maxlen: 24 89.44.86.0/24 maxlen: 24 95.81.79.0/24 maxlen: 24 95.81.113.0/24 maxlen: 24 95.81.126.0/24 maxlen: 24 95.81.127.0/24 maxlen: 24 103.71.22.0/24 maxlen: 24 103.71.23.0/24 maxlen: 24 103.85.114.0/24 maxlen: 24 103.85.115.0/24 maxlen: 24 104.128.132.0/24 maxlen: 24 104.128.133.0/24 maxlen: 24 104.128.134.0/24 maxlen: 24 104.128.135.0/24 maxlen: 24 104.128.136.0/24 maxlen: 24 104.128.137.0/24 maxlen: 24 104.128.138.0/24 maxlen: 24 104.128.139.0/24 maxlen: 24 104.128.140.0/24 maxlen: 24 104.128.141.0/24 maxlen: 24 104.128.142.0/24 maxlen: 24 104.128.143.0/24 maxlen: 24 2a0c:5d00:1002::/48 maxlen: 48 2a0c:5d00:2002::/48 maxlen: 48 2a0c:5d06:2002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ef:98:3d:f7:28:83:96:f2:08:05:ff:3b:06:a7:08:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 24 10:41:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0e42dbd8b1aa9c70d46d6160642e334a4f871f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9c:27:5e:c8:af:6a:d8:ac:b2:aa:8e:f3:e5: 6a:d6:37:89:fd:17:dd:7c:1b:4d:d3:b0:a6:a3:91: 44:91:8e:ba:81:65:90:c8:21:d7:47:45:1d:ea:00: 1c:6a:7f:c0:07:79:18:74:3c:4f:26:74:36:94:b6: 47:65:0c:83:8f:da:f8:d6:94:cb:d3:bd:1e:2f:ec: 4a:56:f4:07:73:39:c8:3c:e4:34:57:b4:bd:e0:34: 25:93:61:8d:c9:ef:9c:7f:ab:a4:a2:35:af:a1:31: 66:5d:2e:1e:a1:fa:70:6b:87:fb:5b:92:00:ec:51: 9e:51:70:3f:6a:3a:db:6f:63:b8:be:d6:5f:bb:8b: 82:a1:92:91:74:e0:d0:e4:af:af:2d:71:75:ce:f6: db:9d:59:70:41:ea:d9:e9:b2:f8:4c:47:d6:15:2d: df:53:38:17:36:b9:ed:cd:49:cc:ef:d9:11:5d:df: d6:79:2b:c8:8d:1a:ef:80:e5:f9:ad:6f:1c:2e:de: 65:61:5e:93:d4:3b:9e:7c:f2:44:c6:01:b1:3b:ca: 9e:87:2e:84:4e:37:d2:34:f7:13:21:f9:23:69:c2: 7b:56:b8:f1:f0:8b:51:98:8a:21:60:c5:57:9d:7d: 9f:cd:31:fe:df:b3:28:5f:37:7e:3f:c6:3c:0f:31: c4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E4:2D:BD:8B:1A:A9:C7:0D:46:D6:16:06:42:E3:34:A4:F8:71:F7 X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/8OQtvYsaqccNRtYWBkLjNKT4cfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.1.0/24 46.243.4.0/24 46.243.6.0/24 89.44.86.0/24 95.81.79.0/24 95.81.113.0/24 95.81.126.0/23 103.71.22.0/23 103.85.114.0/23 104.128.132.0-104.128.143.255 IPv6: 2a0c:5d00:1002::/48 2a0c:5d00:2002::/48 2a0c:5d06:2002::/48 Signature Algorithm: sha256WithRSAEncryption 82:2d:f7:41:f9:91:98:40:80:b0:36:75:c7:29:a6:60:e2:cc: 24:ac:fa:30:82:94:31:96:eb:30:73:a0:68:f8:54:f4:2b:e2: af:fb:71:f7:bc:87:14:ba:2c:a7:76:9b:aa:0d:fe:b4:5c:89: c9:d5:a5:4e:1e:64:58:bf:62:f7:97:8d:3b:32:db:64:88:2d: 7f:d6:7f:f0:f3:f6:de:f1:c3:f2:5f:7f:af:6b:28:63:5f:65: 16:98:9d:db:f6:60:1e:9a:d7:a7:5e:9e:32:f1:0b:6f:01:55: 78:6e:96:d5:47:a4:f7:79:87:27:94:b4:ad:ab:8f:70:6d:89: 52:6d:ec:0f:1a:7d:0e:21:a4:91:b9:0f:90:b3:79:dd:fe:ce: 95:57:d5:7d:1c:e9:01:df:96:89:50:e5:b2:72:ce:77:b1:52: 88:a2:d4:8f:b2:0c:8c:c6:e9:0c:6c:58:b6:3d:d0:f6:62:1a: 05:f3:61:14:93:da:d4:e4:76:6d:c6:d4:4f:a7:08:34:74:34: 12:23:6c:60:0f:0e:67:96:43:24:c3:c7:e7:c0:13:5f:5e:e6: 7b:18:85:da:cd:13:8d:65:12:67:b4:9f:41:35:7c:a5:b0:2f: 41:35:fa:e5:4d:ba:62:94:a6:90:d5:58:90:9b:b1:1a:91:3b: 6a:89:0a:e2 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgISAZvvmD33KIOW8ggF/zsGpwjQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTI0MTA0MTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGU0MmRiZDhiMWFhOWM3MGQ0NmQ2MTYwNjQyZTMzNGE0Zjg3MWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpwnXsivatissqqO8+Vq1jeJ/Rfd fBtN07Cmo5FEkY66gWWQyCHXR0Ud6gAcan/AB3kYdDxPJnQ2lLZHZQyDj9r41pTL 070eL+xKVvQHcznIPOQ0V7S94DQlk2GNye+cf6ukojWvoTFmXS4eofpwa4f7W5IA 7FGeUXA/ajrbb2O4vtZfu4uCoZKRdODQ5K+vLXF1zvbbnVlwQerZ6bL4TEfWFS3f UzgXNrntzUnM79kRXd/WeSvIjRrvgOX5rW8cLt5lYV6T1DuefPJExgGxO8qehy6E TjfSNPcTIfkjacJ7Vrjx8ItRmIohYMVXnX2fzTH+37MoXzd+P8Y8DzHEaQIDAQAB o4ICazCCAmcwHQYDVR0OBBYEFPDkLb2LGqnHDUbWFgZC4zSk+HH3MB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvOE9RdHZZc2FxY2NOUnRZV0JrTGpOS1Q0Y2ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGABggrBgEFBQcBBwEB/wRxMG8wSgQCAAEwRAMEAC7zAQME AC7zBAMEAC7zBgMEAFksVgMEAF9RTwMEAF9RcQMEAV9RfgMEAWdHFgMEAWdVcjAM AwQCaICEAwQEaICAMCEEAgACMBsDBwAqDF0AEAIDBwAqDF0AIAIDBwAqDF0GIAIw DQYJKoZIhvcNAQELBQADggEBAIIt90H5kZhAgLA2dccppmDizCSs+jCClDGW6zBz oGj4VPQr4q/7cfe8hxS6LKd2m6oN/rRcicnVpU4eZFi/YveXjTsy22SILX/Wf/Dz 9t7xw/Jff69rKGNfZRaYndv2YB6a16denjLxC28BVXhultVHpPd5hyeUtK2rj3Bt iVJt7A8afQ4hpJG5D5Czed3+zpVX1X0c6QHflolQ5bJyznexUoii1I+yDIzG6Qxs WLY90PZiGgXzYRST2tTkdm3G1E+nCDR0NBIjbGAPDmeWQyTDx+fAE19e5nsYhdrN E41lEme0n0E1fKWwL0E1+uVNumKUppDVWJCbsRqRO2qJCuI= -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:27 2026 by rpki-client